吉林大学大型数据库设计与实现dba-14.ppt
ObjectivesAftercompletingthislesson,youshouldbeabletodothefollowing:ManagepasswordsusingprofilesAdministerprofilesControluseofresourcesusingprofilesObtaininformationaboutprofiles,passwordmanagement,andresources
ProfilesAprofileisanamedsetofpasswordandresourcelimitsProfilesareassignedtousersbytheCREATEUSERorALTERUSERcommandCanbeenabledordisabledCanrelatetotheDEFAULTprofile
PasswordManagementUserPasswordexpiration
andagingPasswordverificationPasswordhistoryAccountlockingSettingupprofiles
EnablingPasswordManagementSetuppasswordmanagementbyusingprofilesandassignthemtousers.Lock,unlock,andexpireaccountsusingtheCREATEUSERorALTERUSERcommand.Passwordlimitsarealwaysenforced.
PasswordAccountLockingParameterFAILED_LOGIN_ATTEMPTS
PASSWORD_LOCK_TIME
DescriptionNumberoffailedloginattemptsbeforelockoutoftheaccountNumberofdaystheaccountislockedafterthespecifiednumberoffailedloginattemptsPASSWORD_LOCK_TIME
PasswordExpirationandAgingParameterLifetimeofthepasswordindaysafterwhichthepasswordexpiresGraceperiodindaysforchangingthepasswordafterthefirstsuccessfulloginafterthepasswordhasexpiredPASSWORD_LIFE_TIME
PASSWORD_GRACE_TIMEParameter
PasswordHistoryParameterPASSWORD_REUSE_TIME
PASSWORD_REUSE_MAX
DescriptionNumberofdaysbeforeapasswordcanbereusedMaximumnumberoftimesa
passwordcanbereused
PasswordVerificationParameterPASSWORD_VERIFY_FUNCTION
DescriptionPL/SQLfunctionthatmakesapasswordcomplexitycheckbeforeapasswordisassigned
User-ProvidedPasswordFunctionFunctionmustbecreatedintheSYSschemaandmusthavethefollowingspecification:function_name(userid_parameterINVARCHAR2(30),password_parameterINVARCHAR2(30),old_password_parameterINVARCHAR2(30))RETURNBOOLEAN
PasswordVerificationFunctionVERIFY_FUNCTIONMinimumlengthisfourcharacters.Passwordshouldnotbeequaltousername.Pas